요약
- CVE-2026-54533은(는) vantage6에 영향을 주는 보통 (CVSS 6.9) 취약점입니다.
- 향후 30일 내 악용 확률(EPSS): 0.29%, 전체 취약점의 21.1%보다 높음.
- 조치: 5.0.0 이상으로 업데이트하세요.
| Package | Affected versions | Patched versions |
|---|
| vantage6 PyPI | < 5.0.0
| 5.0.0
|
Description
Impact
Malicious algorithms can potentially access other algorithms input and output files.
Patches
Todo
Workarounds
Verify and restrict the algorithm containers that are allowed to run on your node. See here on how to do this.
References
https://docs.vantage6.ai/usage/running-the-node/security
For more information
If you have any questions or comments about this advisory:
NVD description
vantage6 is an open-source infrastructure for privacy preserving analysis. Prior to version 5.0.0, malicious algorithms can potentially access other algorithms input and output files. Version 5.0.0 fixes the issue. As a workaround, verify and restrict the algorithm containers that are allowed to run on the node.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free